Recently stumbled across this site when trying to roll out Adobe Reader 9 and it's already proved very valuable.

I've started using the Adobe Customization Wizard and it seems to be accepting a number of settings that I want to use, such as removing the EULA and a couple of items from the Help menu.

However, the main reason I want to use it is to add domains to the 'Privileged Locations Exempt from Enhanced Security' option. I have added two domains in there and checked the option to allow 'External Content' and 'Silent Printing'. However, when I run the msi with the transform file the application installs, but the Edit - Preferences - Security (Enhanced) doesn't show the domains I have added.

If I open the transform file in Notepad I can see the domains in there, so I know it's saving okay. But I think there must be some option I'm missing to enable them.

Any help much appreciated.

Nick
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
Even i have noticed the same.
What i see here is adding torusted domain make changes to registry key "HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\TrustManager\cTrustedSites". But when i tried to add the trusted domain using Adobe Customization Wizard it failed to create such registry entry. Solved the issue by manually editing MST using ORCA.

In your case, i suggest you to make other neccessary changes using Adobe Customization Wizard but to achieve this edit your MST manually.

Cheers!
Santro
Answered 10/07/2008 by: zipsantro
Purple Belt

Please log in to comment
0
Thanks for the reply Santro.

I've just downloaded Orca, but it will only open the MSI file, rather than the MST file. Can you confirm again what you did?

Cheers,

Nick
Answered 10/07/2008 by: nicklloyd
Senior Yellow Belt

Please log in to comment
0
Open adobe msi file and apply the transform using these steps-
1. Goto Transform menu --> Apply Transform and browse to your MST.
OR
2. Drag & Drop your MST to ORCA after opening MSI on it.

Then do the necessary changes to the tables and save the MST.

Cheers!
Santro
Answered 10/07/2008 by: zipsantro
Purple Belt

Please log in to comment
0
Thanks again Santro.

Sorry for being a bit thick, but it's very early days for me with MSI and MST files :)

I've now got the MST loaded in Orca and I can see the entries under EnterpriseRegistries and cTrustedSites as below:

cExternalStream
cSilentPrint

Are you saying even those these entries exist in the MST, they're not created in the registry when you install? Are you adding a new row with the string you posted above? If so, what entry do you put in the EnterpriseRegistry field?

Thanks again.

Nick
Answered 10/07/2008 by: nicklloyd
Senior Yellow Belt

Please log in to comment
0
Using Adobe Customization Wizard won't put the required setting directly. Actually it creates a external table "EnterpriseRegistries" and creates a property "SetupCacheExport=Enterprise.mnt" which actually executes at runtime and create all the required registry entires. Manually doing so is just to avoid this automatic way and directly modifying registry entries. I exactly dont know how the data available in "EnterpriseRegistries" is getting missed and hence the registry entry wont appear.
Manul Step: -
1. Goto registry table to add row.
2. Provide details for the respective Fields. Such as Registry="A Unique Name", ROOT = "1", Key = "Software\Adobe\Acrobat Reader\9.0\TrustManager\cTrustedSites\cCrossdomain", Name="t2", Value="Your Domain Name", Component = "Use any component from your MSI which can be copied from other rows in registry table".
NOTE- These steps is to add only one registry entry. So it again to add more registry entires.

Hope this will help you a lot.
Cheers!
Santro
Answered 10/07/2008 by: zipsantro
Purple Belt

Please log in to comment
0
I think it just clicked!

The entries I'm seeing in 'EnterpriseRegistries' aren't being applied, so I need to copy them from there to 'Registry'.

Is that right?

Thanks once again Santro.

Nick
Answered 10/07/2008 by: nicklloyd
Senior Yellow Belt

Please log in to comment
0
I think it has changed the format which might create problem for you.
Try this
http://groups.google.co.in/group/windows-installer-technology/web/appdeploy?hl=en
Answered 10/07/2008 by: zipsantro
Purple Belt

Please log in to comment
0
Thanks for putting that up there Santro, much appreciated.

I've just tried installing it again just adding one entry as you posted. Unfortunately it hasn't worked, but when I browse the registry down to:

HKLM\Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\TrustManager\cTrustedSites\

I see all four entries that are under EnterpriseRegistries...

Very annoying.

Nick
Answered 10/07/2008 by: nicklloyd
Senior Yellow Belt

Please log in to comment
0
I've just done a quick test on my test machine and added a domain manually to the Enhanced Security section. Then searching for the registry for that entry it gets added under HKEY_CURRENT_USERS and HKEY_USERS, but not HKLM.

Nick
Answered 10/07/2008 by: nicklloyd
Senior Yellow Belt

Please log in to comment
0
Any changes at the runtime from user side goes to HKEY_CURRENT_USER, but if you look at your "EnterpriseRegistries" table it points to HKLM.
If you still face any issue in getting those domain names under Security(Enhanced), you can add those registry under HKCU. This will work fine for all the users.
NOTE: - Don't worry about HKEY_USERS. Thsi particular hive is to capture only changes during logged on which operating uses for its processing.

Cheers!
Santro
Answered 10/07/2008 by: zipsantro
Purple Belt

Please log in to comment
Answer this question or Comment on this question for clarity